Feature #59074
closed
[FE] Ask for password-change on next login
Added by Stefan Neufeind almost 11 years ago.
Updated almost 5 years ago.
Description
- flag for a user that the password neeeds to be changed on next login
- addition to the login to perform a password-change
Optional might imho be a way to allow a "skip now" for a certain amount of time (probably controllable through hooks.
The login or password-change might need to offer it - but if and how the skip should be available could then be up to hooks to set so the logic for that inside TYPO3 remains small.
- Subject changed from Ask for password-change on next login to [FE] Ask for password-change on next login
- Related to Feature #80793: provide configurable password policies added
- Status changed from New to Rejected
Hey Stefan,
I consulted with the security team, and we decided that this won't go into TYPO3 Core, but rather be a standalone extension (as there are multiple extensions out there already). This isn't part of the BSI requirement anymore, and thus does not need to be part of TYPO3 Core.
Also available in: Atom
PDF